writeups.xyz / How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE!

Submitter : c2a

Date: 28 July 2017

Bounty : 12,500

Vulnerabilities :

• SSRF
• RCE
• CRLF Injection
• Insecure Deserialization

Programs :

• GitHub

Authors :

• Orange Tsai (@Orange_8361)

Link :
https://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html